<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 16px; font-family: Calibri, sans-serif;">
<div>
<div>We could volunteer for C# - we already have an extensive set of samples for the various flows here:</div>
<div><br>
</div>
<div><a href="https://github.com/thinktecture/Thinktecture.IdentityServer.v3.Samples/tree/master/source/Clients">https://github.com/thinktecture/Thinktecture.IdentityServer.v3.Samples/tree/master/source/Clients</a></div>
<div><br>
</div>
<div>So I could also write some of that up.</div>
<div>
<div id="MAC_OUTLOOK_SIGNATURE"></div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:12pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Nat Sakimura <<a href="mailto:sakimura@gmail.com">sakimura@gmail.com</a>><br>
<span style="font-weight:bold">Date: </span>Sonntag, 2. November 2014 07:51<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:openid-specs-ab@lists.openid.net">openid-specs-ab@lists.openid.net</a>" <<a href="mailto:openid-specs-ab@lists.openid.net">openid-specs-ab@lists.openid.net</a>><br>
<span style="font-weight:bold">Subject: </span>[Openid-specs-ab] Cookbooks project<br>
</div>
<div><br>
</div>
<div>
<div>Hi Connectors,<br>
<br>
Having seen 'OpenID Connect is not so hard' session by Justin and Amazon sessions at IIW XIX, I started to feel that perhaps having language specific cookbooks would help developers a lot.
<br>
<br>
For example, we could write a cookbook for JavaScript public client with proper handling of state parameters, generation of cryptographic random, etc. with sample codes that can be copied to their projects. I am pretty sure that if we do not provide these,
people are prone to write a client with Math.random or even worse -- a fixed string-- as nonce and state.
<br>
<br>
What do you think? <br>
<br>
The first batch of language that I have in mind are: <br>
<br>
- JavaScript <br>
- PHP<br>
- Python<br>
- Ruby<br>
- Java<br>
<br>
Any volunteers to lead each project?<br>
<br>
Nat<br>
</div>
</div>
</span>
</body>
</html>